Manifest
$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
File: B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft (raw, json)
Hash identifier: lZxvLIGPrfdJZoRBPtd2e6u/nYHHVvwJJzC7RCgVoyI=
Subject key identifier: 2C:CD:86:C5:AF:C1:37:B1:1C:33:0E:73:4F:B0:53:24:83:92:A2:13
Authority key identifier: B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
Certificate issuer: /CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Certificate serial: 46AB7AA00BB06BFFE5CC5D5FDD48B673EE875578
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject info access: rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
Manifest number: 96
Signing time: Sun 13 Apr 2025 06:07:06 +0000
Manifest this update: Sun 13 Apr 2025 06:02:06 +0000
Manifest next update: Mon 14 Apr 2025 07:37:06 +0000
Files and hashes: 1: B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl (hash: nhNvOoWSbDvsmAK4GdgPLtLBX+r5cAFa6Q48ftQiDuo=)
2: 323030313a3637633a6438303a3a2f34382d3438203d3e20343031353531.roa (hash: mqadfIJnOHBwBW3bzOjsszkG4yNmowPDrD6AKDG5B1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:ab:7a:a0:0b:b0:6b:ff:e5:cc:5d:5f:dd:48:b6:73:ee:87:55:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b60561dffbfde255fec14d4d9f0e13f4375352e4
Validity
Not Before: Apr 13 06:02:06 2025 GMT
Not After : Apr 14 07:37:06 2025 GMT
Subject: CN=2CCD86C5AFC137B11C330E734FB053248392A213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:0d:b0:02:72:72:39:d3:d3:32:ff:3a:75:5c:
d4:c9:ce:af:c1:60:f1:89:94:e7:e5:56:49:a3:23:
5e:3f:7d:f9:0c:53:8b:8a:64:db:ef:05:62:e1:45:
b7:2a:f3:65:e5:4c:28:68:c8:52:65:bb:fc:53:67:
d6:f2:eb:64:58:80:f2:76:8d:48:3a:10:f3:2a:83:
35:a9:b8:fc:0f:27:af:64:b7:fe:09:40:fa:f7:7f:
b0:03:0c:67:97:80:23:db:59:2d:12:7e:52:66:ae:
8b:a8:37:16:c1:bb:92:e5:be:86:24:ff:43:d7:e8:
bc:f6:74:01:1d:45:ef:b1:54:eb:2d:04:2b:3a:57:
87:60:7c:c8:e2:b4:f1:f7:09:a9:c7:e6:d1:bc:f1:
c6:3c:8f:19:67:9a:62:98:50:51:ce:a3:c5:2e:d9:
7d:1c:84:9c:fd:8c:5a:be:17:94:0b:92:df:75:a5:
0a:61:56:f6:26:03:16:38:00:25:de:ec:04:ce:df:
2c:3a:fb:87:50:5c:c9:93:9b:e9:16:83:8a:c5:e5:
92:e9:29:29:70:52:d4:33:41:e4:67:54:47:c5:cf:
d9:ec:4e:3a:8b:e5:48:4f:6a:5e:ba:94:bf:26:ba:
e0:93:98:da:7b:c5:54:4d:9b:c8:4a:61:4a:d2:75:
f2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:CD:86:C5:AF:C1:37:B1:1C:33:0E:73:4F:B0:53:24:83:92:A2:13
X509v3 Authority Key Identifier:
keyid:B6:05:61:DF:FB:FD:E2:55:FE:C1:4D:4D:9F:0E:13:F4:37:53:52:E4
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tgVh3_v94lX-wU1Nnw4T9DdTUuQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/0/B60561DFFBFDE255FEC14D4D9F0E13F4375352E4.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:b9:0b:c7:86:40:b2:a2:7d:7e:5e:e9:12:5c:ca:05:74:94:
88:c6:ca:18:4c:5c:78:34:3f:07:27:69:47:3b:76:b4:56:90:
4b:42:cc:58:d4:bb:17:80:a7:f5:c0:71:88:e4:24:e3:e3:ac:
32:42:22:a7:1b:45:2f:d1:38:75:cb:38:c6:96:73:cf:4a:31:
3e:d9:66:3a:f3:9c:01:91:b9:c4:23:9a:d1:52:92:a5:b2:dc:
e8:43:62:16:13:1e:01:c8:48:90:27:c4:f6:98:2c:08:f3:36:
70:36:6c:62:24:24:c2:c4:5e:82:e3:ed:12:22:a2:20:37:74:
8b:9b:ed:06:54:3b:9e:39:1e:af:01:a8:fe:3b:4f:d1:70:a3:
58:d5:47:29:f7:66:af:94:c0:3a:cb:87:96:ff:c8:cb:bf:e4:
f5:59:07:30:21:34:36:3f:9e:47:de:ea:06:51:55:0c:3e:1d:
ac:1d:4c:70:0f:82:a9:2e:06:0b:a0:93:ec:73:dd:ce:ea:0c:
1d:a7:d8:61:87:4d:d5:5c:bc:8e:df:12:bb:84:b3:34:d1:80:
85:4d:c5:11:05:1d:80:43:b0:bc:34:fe:74:95:8b:d4:db:d1:
bf:d4:01:c5:33:5f:d4:22:75:f0:8a:34:31:e4:7d:02:22:32:
d9:d1:61:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:33 2025 by rpki-client on console.sobornost.net